Is there a way to add more/better granularity to the Pre-Boot cycle?
Basically, the system requires me to add in the user that it will authenticate via AD, but how about the standard "Support" local account that desktop always uses on devices? What about making sure that the desktop group is allowed to log in as required in the field where they may not have a laptop that is/has been connected to the network for a while?
I find it troubling that in order to make sure that this stuff works, I have to completely disable Pre-boot authentication.
Bookmarks